---
title: "Setting an Event Status to False Positive | ThreatConnect"
slug: "setting-an-event-status-to-false-positive"
description: "This article describes how to set the status of an Event Group to False Positive and, if desired, report Indicators associated to the Group as false positives."
tags: ["Enriching Data"]
updated: 2023-05-18T12:07:27Z
published: 2023-05-18T12:07:27Z
canonical: "knowledge.threatconnect.com/setting-an-event-status-to-false-positive"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://knowledge.threatconnect.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Setting an Event Status to False Positive

Follow these steps to set the****status****of an [Event Group](https://knowledge.threatconnect.com/v1/docs/the-threatconnect-data-model#group-types) to **False Positive**, and, if desired, report Indicators associated to the Group as false positives.

ImportantYou will be prompted to report Indicators associated to the Group as false positives when setting an Event Group’s status to **False Positive** on the legacy **Details**screen only.

## New Details Screen

1. [Navigate to the **Details**screen](https://knowledge.threatconnect.com/docs/the-details-screen#viewing-the-details-screen) for an Event Group.
2. On the **Overview**tab, click **Edit![Edit button_Details card_Details screen](https://cdn.document360.io/dfc206c8-1c9f-4725-b74d-a66f83432320/Images/Documentation/Edit%20button_Details%20card_Details%20screen.png)**at the top right of the **Details**card, or click on the **Status**section of the **Details**card. The Group’s status will now be editable (Figure 1).

![Figure 1_Setting an Event Status to False Positive_7.0.0](https://cdn.document360.io/dfc206c8-1c9f-4725-b74d-a66f83432320/Images/Documentation/Figure%201_Setting%20an%20Event%20Status%20to%20False%20Positive_7.1.0.png)
  - **Status**: Select **False Positive**from the dropdown menu.
  - Click **Confirm![Confirm icon_Details screen](https://cdn.document360.io/dfc206c8-1c9f-4725-b74d-a66f83432320/Images/Documentation/Confirm%20icon_Details%20screen.png)**to save the changes made to the Group’s status.

## Legacy Details Screen

1. [Navigate to the legacy **Details** screen](https://knowledge.threatconnect.com/docs/the-details-screen-legacy#viewing-the-legacy-details-screen) for an Event Group.
2. Scroll down to the **Details** card on the right side of the screen.
3. Click the value for **Status**to display a dropdown menu (Figure 2).

![Figure 2_Setting an Event Status to False Positive_7.0.0](https://cdn.document360.io/dfc206c8-1c9f-4725-b74d-a66f83432320/Images/Documentation/Figure%202_Setting%20an%20Event%20Status%20to%20False%20Positive_7.0.0.png)
  - **Status**: Select **False Positive**from the dropdown menu.
  - Click **Save![Save icon](https://cdn.document360.io/dfc206c8-1c9f-4725-b74d-a66f83432320/Images/Documentation/Save%20icon.png)**to save the changes made to the Group’s status.
4. After the Group’s status is set to **False Positive**, the **Apply False Positive** window will be displayed. Click the **YES** button to report all Indicators associated to the Group as false positives, if desired.

---

*ThreatConnect® is a registered trademark of ThreatConnect, Inc.*

20047-04 v.09.B